CVE-2026-8997 — vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the application lacks a runtime check on the length o — CVE Database · The Intelligence Room